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Abstract 


This  paper  introduces  two  variants  of  the  Event  Calculus  (EC)  with  relative  timing  of  events: 
the  Credulous  and  the  Skeptical  Event  Calculus  (CREC  and  SKEC  respectively).  A  model  that 
takes  into  account  the  dynamics  of  event  ordering  updates  is  constructed  for  EC.  In  this  model, 
that  appears  to  be  a  restriction  of  the  usual  model  for  the  modal  logic  S4,  CREC  and  SKEC 
are  proved  to  be  the  modal  counterparts  of  EC.  It  is  then  shown  how  a  full  propositional  modal 
logic  based  on  these  calculi  can  be  conveniently  and  elegantly  coded  by  means  of  the  linear 
logic  programming  language  Lolli. 


Accession  For _ 

HTli  GRMI 
DSIC  TAB  □ 

Unannounced  0 

J®.at  if  i  Gat  i  on - - — 


By- 


Distribution/  A 


Availability  Oggeg 

aad/or 


Biat 


[Avail 
St-sclf-1 


1  Introduction 

This  paper  studies  the  formalization  of  Kowalski  and  Sergot's  Event  Calculus  [3,  9,  16,  17,  19,  20] 
(hereinafter  EC)  in  cases  where  information  about  the  ordering  of  events  is  incomplete  [1,  18].  This 
situation  arises  in  many  real-world  applications  (e.g.  [11]).  Complete  ordering  information  can  be 
impossible  to  acquire  or  it  can  arrive  asynchronously  with  respect  to  the  recording  of  event  occurrences. 

EC  is  a  formalism  for  reasoning  about  time  and  change  in  a  logic  programming  framework.  Given  a 
set  of  event  occurrences,  EC  allows  to  derive  maximal  time  intervals  (MVIs  hereinafter)  over  which  the 
properties  they  initiate  or  terminate  hold.  However,  when  only  partial  knowledge  about  the  ordering  of 
events  is  given,  EC  is  neither  able  to  derive  all  possible  MVIs  nor  to  distinguish  which  of  the  derived 
intervals  are  defeasible  and  which  are  not.  On  the  contrary,  a  typical  human  reasoner  who  is  told  a 
narrative  in  which  the  ordering  of  events  is  not  completely  known  is  able  to  distinguish  among 
conclusions  which  can  be  certainly  or  possibly  drawn.  Moreover,  he/she  is  able  to  change  his/her  beliefs 
when  provided  with  new  information  increasing  the  ordering.  In  order  to  produce  comparable  results, 
we  developed  two  variants  of  EC,  namely  the  skeptical  and  the  credulous  EC  [4]  ( SKEC  and  CREC 
respectively).  In  the  presence  of  a  partially  ordered  sequence  of  events,  SKEC  and  CREC  derive  the 
intervals  that  are  necessarily  and  possibly  true,  respectively.  The  results  obtainable  with  these  two 
variants  of  EC  are  amenable  to  a  rather  intuitive  modal  interpretation.  The  first  derives  MVIs  that  will 
be  true  in  whatever  final  completion  of  the  ordering,  while  the  second  derives  those  that  may  be  true  at 
least  in  one  possible  refinement  of  the  ordering.  In  [4]  we  provided  both  variants  with  a  modal  logic 
interpretation  that  allows  us  to  formally  characterize  the  state  of  knowledge  about  event  ordering  and  its 
update  as  well  as  queries  about  maximal  validity  intervals.  Furthermore,  we  discussed  an  example  of 
their  application  to  a  diagnostic  case  study  concerning  temporally  distributed  information  about  devices 
behavior.  In  this  work,  we  provide  a  different  modal  interpretation  that  integrates  EC,  SKEC  and  CREC 
in  a  uniform  modal  logic  framework.  In  particular,  we  show  how  the  two  latter  calculi  can  be 
respectively  viewed  as  the  operational  counterpart  of  the  modal  operators  of  necessity  and  possibility. 

In  the  last  section,  we  show  how  the  resulting  modal  logic  can  be  conveniently  and  elegantly  coded 
by  means  of  the  linear  logic  programming  language  Lolli. 

2  The  plain  Event  Calculus 

EC  proposes  a  general  approach  to  representing  and  reasoning  about  events  and  their  effects  in  a 
logic  programming  framework.  It  takes  the  notions  of  event,  property,  time-point  and  time-interval  as 
primitives  and  defines  a  model  of  change  in  which  events  happen  at  time-points  and  initiate  and/or 
terminate  time-intervals  over  which  some  property  holds.  EC  also  embodies  a  notion  of  default 
persistence  according  to  which  properties  are  assumed  to  persist  until  an  event  that  interrupts  them 
occurs.  Formally,  we  represent  an  event  occurrence  by  means  of  the  happens  predicate: 

happens ( event ) . 

A  time-stamp  can  be  attached  to  an  event  to  record  its  occurrence  time.  In  this  work,  we  will  focus  our 
attention  on  situations  where  precise  date  information  for  event  occurrences  are  not  available.  Events 
will  therefore  be  ordered  relatively  to  each  other  rather  than  with  respect  to  an  absolute  time  line.  To 
this  purpose,  we  introduce  the  possibility  of  providing  factual  knowledge  about  the  relative  ordering  of 
events,  expressed  through  the  predicate  beforeFact: 

beforeFact (eventl ,  event2). 
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This  representation  allows  the  management  of  incomplete  ordering  information.  Each  time  a  new  piece 
of  ordering  information  emerges,  it  is  recorded  by  means  of  a  beforeFact  fact.  EC  exploits  the  transitive 
closure  of  this  ordering  information  defined  by  means  of  the  predicate  before : 

before (El,  E2 )  before (El,  E2 ) 

beforeFact (El ,  E2 ) .  beforeFact (El,  E3 ) ,  before(E3,  E2 )  . 

The  relation  between  events  and  properties  is  defined  by  means  of  initiates  and  terminates  predicates 
which  express  the  effect  of  events  on  properties: 

initiates ( eventl ,  propertyl).  terminates (event2 ,  property2). 

This  initiates  ( terminates )  predicate  states  that  eventl  ( event2 )  initiates  (terminates)  a  period  of  time 
during  which  propertyl  (propertyl)  holds. 

The  plain  EC  model  of  time  and  change  is  defined  by  means  of  a  set  of  axioms.  The  first  axiom  we 
introduce  is  holds.  It  allows  us  to  state  that  a  property  P  holds  maximally  between  events  Ei  and  Et  if  Ei 
initiates  P  and  occurs  before  Et  that  terminates  P ,  provided  that  there  is  no  known  interruptions  in 
between: 

holds (period (Ei ,  P,  Et) ) 

happens (Ei),  initiates ( Ei ,  P)  , 
happens (Et),  terminates (Et,  P)  , 
before(Ei,  Et) ,  not  broken(Ei,  P,  Et)  . 

The  negation  involving  the  broken  predicate  is  interpreted  as  negation-as-failure.  This  means  that 
properties  are  assumed  to  hold  uninterrupted  over  an  interval  of  time  on  the  basis  of  failure  to  determine 
an  interrupting  event.  Should  we  later  record  an  initiating  or  terminating  event  within  this  interval,  we 
can  no  longer  conclude  that  the  property  holds  over  the  interval.  This  is  the  non-monotonic  aspect  of.  the 
calculus.  The  predicate  broken  is  defined  as  follows: 

broken (Ei,  P,  Et) 

happens (E),  before (Ei,  E) ,  before (E,  Et)  , 

(initiates (E,  Q) ;  terminates (E,  Q) )  , 
exclusive (P,  Q) . 

This  axiom  states  that  a  given  property  P  ceases  to  hold  if  there  is  an  event  E  that  happens  between  Ei 
and  Et  and  initiates  or  terminates  a  property  Q  that  is  incompatible  with  P.  The  exclusive(P,  Q) 
predicate  [9]  has  been  introduced  as  a  constraint  to  force  the  derivation  of  P  to  fail  when  it  is  possible  to 
conclude  that  Q  holds  at  the  same  time,  and  vice  versa.  Exclusivity  is  also  a  convenient  means  to 
constrain  interferences  due  to  incomplete  sequences  of  events  relating  to  the  same  property.  By  adding 
the  axiom 

exclusive (P,  P) . 

we  guarantee  that  the  axiom  broken  succeeds  also  when  an  initiating  or  terminating  event  for  property  P 
is  found  between  the  pair  of  events  Ei  and  Et  starting  and  terminating  P,  respectively. 

3  Managing  the  temporal  ordering  of  events 

Database  updates  in  EC  provide  information  about  the  occurrence  of  events  and  their  occurrence 
times,  and  are  of  additive  nature  only  [10].  Since  EC  computes  MVIs  by  applying  a  default  persistence 
rule,  an  upgrading  of  its  knowledge  about  events  may  result  in  some  MVIs  no  longer  derivable. 
Therefore,  the  computed  set  of  MVIs,  i.e.  the  collection  of  holds(period(ei,  r,  et))  queries  that  succeed 
against  EC,  can  change  cardinality  and  composition  in  response  to  updates. 
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In  this  work  we  focus  on  the  case  in  which  the  set  of  event  occurrences  has  been  fixed  once  and  for 
all,  and  the  updates  only  regard  the  ordering  of  events.  In  such  case,  the  input  process  consists  of  the 
addition  of  ordering  pieces  of  information  in  the  form  of  beforeFact  facts.  In  [1]  we  introduced  a 
monotonic  version  of  EC  such  that  the  set  of  computed  MVIs  monotonically  increases  with  respect  to 
updates.  In  this  work  also  the  opposite  view  is  taken:  a  variant  of  EC  is  defined  which  derives  MVIs 
every  time  there  is  no  evidence  that  the  temporal  ordering  makes  them  unviable,  i.e.  when  the 
terminating  event  does  not  precede  the  initiating  one.  The  set  of  computed  MVIs  monotonically 
decreases  with  respect  to  updates. 

We  nickname  these  two  variants  of  EC  skeptical  Event  Calculus  (SKEC)  and  credulous  Event 
Calculus  (CREC),  respectively. 


3.1  The  skeptical  and  credulous  Event  Calculi 

SKEC  implements  a  sort  of  absolute  persistence  in  order  to  exclude  the  possibility  of  deriving 
information  that  could  be  later  retracted,  provided  that  the  given  set  of  event  occurrences  does  not 
change.  The  idea  is  to  transform  the  definition  of  holds  so  that  holds(period(ei,r,et))  succeeds  if  and 
only  if  it  is  possible  to  conclude  that  no  event  affecting  r  will  ever  occur  after  ei  and  before  et.  In  such  a 
way,  the  computed  MVIs  are  indefeasible  with  respect  to  refinements  of  the  ordering  specification:  new 
ordering  pieces  coming  in  may  result  in  new  MVIs  being  derived,  but  every  old  MVI  is  still  valid.  Thus, 
the  set  of  MVIs  computed  by  SKEC  monotonically  increases. 


SKEC  replaces  the  predicates  holds  and  broken  of  EC  with  the  predicates  skeHolds  and  skeBroken, 
respectively,  which  are  defined  by  the  following  axioms: 


skeHolds (period (Ei ,  P,  Et)  ) 

happens (Ei),  initiates (Ei , P)  , 
happens (Et),  terminates (Et,  P)  , 
before (Ei,  Et) , 
not  skeBroken (Ei ,  P,  Et) . 


skeBroken (Ei ,  P,  Et) 

happens (E),  E  \==  Ei,  E  \==  Et, 
not  before (E,  Ei) ,  not  before(Et,  E) , 
(initiates (E,  PI);  terminates (E,  PI)), 
exclusive(P,  Pi). 


Differently  from  SKEC,  CREC  stresses  the  non-monotonism  of  EC:  whenever  it  is  not  possible  to 
derive  that  a  terminating  event  et  precedes  an  initiating  event  ei,  CREC  assumes  that  et  follows  ei.  Such 
an  assumption  allows  CREC  to  compute  all  MVIs  which  are  not  incompatible  with  a  given  set  of 
partially  ordered  events.  More  precisely,  CREC  computes  every  MVI  that  holds  with  respect  to  at  least 
one  possible  completion  of  the  given  partial  ordering  of  events.  When  new  information  about  the  event 
ordering  is  added,  this  set  of  computed  MVIs  monotonically  decreases.  Further  constraining  the 
ordering  of  events  may  indeed  invalidate  previously  computed  MVIs,  but  it  never  forces  CREC  to 
compute  new  MVIs.  The  input  process  can  thus  be  viewed  as  a  way  of  progressively  selecting  from  the 
initial  set  of  all  possible  MVIs  the  subset  of  MVIs  derivable  from  a  totally  ordered  set  of  events. 

The  axioms  of  CREC  are  the  same  of  EC  but  for  the  replacement  of  before(Ei,Et)  with  the  negation 
of  before(Et,Ei)  in  the  definition  of  holds.  The  resulting  predicate  creHolds  is  defined  as  follows: 

creHolds (period (Ei ,  P,  Et) ) 

happens(Ei),  initiates  (Ei.,  P)  , 

happens (Et) ,  terminates (Et,  P)  , 

not  before (Et,  Ei) ,  not  broken(Ei,  P,  Et) . 


3.2  Summary  of  the  axioms 

For  the  ease  of  the  reader,  we  collect  together  the  Prolog  axioms  of  the  event  calculi  presented  so 
far. 
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(I) 


holds (period (Ei ,  P,  Et) ) 

happens (Ei),  initiates (Ei ,  P) , 
happens (Et),  terminates (Et,  P) , 
before (Ei,  Et) , 
not  broken (Ei,  P,  Et) . 

broken (Ei,  P,  Et)  (2) 

happens (E) , 

before (Ei,  E) ,  before (E,  Et) , 

(initiates (E,  PI);  terminates ( E ,  PI)), 
exclusive(P,  PI). 

skeHolds (period (Ei ,  P,  Et))  (3) 

happens (Ei),  initiates (Ei ,  P) , 
happens (Et),  terminates (Et,  P)  , 
before (Ei ,  Et) , 
not  skeBroken (Ei ,  P,  Et) . 

skeBroken (Ei ,  P,  Et)  (4) 

happens ( E ) , 

E  \==  Ei,  E  \==  Et, 

not  before(E,  Ei) ,  not  before(Et,  E) , 

(initiates (E,  PI);  terminates (E,  PI)), 
exclusive(P,  PI). 

creHolds (period(Ei,  P,  Et) )  (5) 

happens (Ei),  initiates (Ei ,  P) , 
happens (Et),  terminates (Et ,  P) , 
not  before (Et,  Ei) , 
not  broken (Ei,  P,  Et) . 


exclusive  (l 

P,  P)  • 

(6) 

before (El , 

E2 )  :  - 

(7) 

beforeFact (El ,  E2). 

before (El , 

E2) 

(8) 

beforeFact (El ,  E3 )  , 
before (E3 ,  E2 ) . 


Clauses  (1-8)  are  generically  called  the  axioms  of  the  extended  Event  Calculus  and  are  referred  to 
as  EC+.  Clauses  (1-2,  6-8)  constitute  the  axioms  of  EC  and  are  denoted  as  EC.  We  define  the  axioms  of 
CREC  (CREC)  as  clauses  (2,  4,  6-8)  and  the  axioms  of  SKEC  (SKEC)  as  clauses  (3-4,  6-8)  in  a  similar 
way.  A  collection  of  happens,  initiates,  terminates  and  exclusive  facts  is  called  factual 
knowledge ;  the  letter  F  will  be  used  to  indicate  it.  Finally,  a  collection  of  beforeFact  facts  is  referred  to 
as  ordering  information  and  is  denoted  with  the  letter  O. 

4  A  modal  logic  reconstruction  of  the  Event  Calculus 

The  clausal  definitions  for  EC,  SKEC  and  CREC  have  a  formal  counterpart  as  a  modal  theory 
where  orderings  are  interpreted  as  possible  worlds,  each  one  denoting  a  different  state  of  knowledge. 
According  to  this  interpretation,  an  MVI  derived  by  EC  translates  into  a  formula  which  is  true  in  the 
current  world,  and  its  derivability  according  to  SKEC  and  CREC  corresponds  to  the  truth  of  the  formula 
in  every  accessible  world  and  in  at  least  one  of  them,  respectively. 
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4.1  Formalization  of  the  Event  Calculus  with  relative  timing 

In  order  to  formalize  EC,  we  first  give  a  precise  description  of  the  factual  knowledge,  i.e.  the  events 
under  consideration,  their  relationships  with  the  properties  they  initiate  and  terminate,  and  the 
exclusivity  relation  among  the  latter. 

A  structure  for  the  Event  Calculus  with  relative  timing  (hereinafter  EC  structure)  is  a  quintuple 
H  =  (E,  P,  [.),  <.],].,.[)  such  that: 

•  E=  {el,  ...,  en\ is  &  set  of  events. 

•  p  =  [p 1 ,  . . . ,  pm }  is  a  set  of  properties. 

•  [  p  _>  2£  and  (.]:  P  2E  are  respectively  the  initiating  and  the  terminating  map  of  H.  For  every 
property  p  e  P,  [p)  and  {p ]  represent  respectively  the  set  of  initiating  and  the  set  of  terminating 
events  of  p.  We  require  [p)  and  ( p ]  to  be  disjoint  sets  for  every  p  e  P. 

•  ],,.[cPxP  is  a  reflexive  and  symmetric  relation  called  the  exclusivity  relationship,  and  models 
exclusivity  among  properties. 

In  order  to  formalize  the  notion  of  ordering,  let  us  denote  with  R+  the  transitive  closure  of  a  relation 
R  on  a  set  A.  We  define  o  c£x  E  to  be  a  knowledge  state  for  E  if  o+  is  a  (possibly  partial)  strict 
ordering  on  E,  i.e.  a  relation  over  E  that  is  irreflexive,  transitive  and  antisymmetric.  Let  (),.  be  the  set  of 
all  knowledge  states  for  E  and  WE  c  0E  the  set  of  all  strict  orderings  on  E  (the  pedices  will  be  kept 
implicit  when  no  confusion  can  arise).  Two  knowledge  states  o |  and  o2  are  equally  informative  if 
of  =  of.  This  induces  an  equivalence  relation  ~  on  O.  It  is  easy  to  prove  that  0/_  and  W  are  isomorphic. 
Therefore,  in  the  following,  a  knowledge  state  o  will  always  refer  to  the  corresponding  element  o+  of  W, 
unless  explicitly  stated  otherwise. 

(W,  c),  where  c  is  the  ordinary  subset  relation,  has  the  structure  of  an  ordered  set.  Moreover,  it 
can  be  easily  proved  that  (W,  n,  0)  forms  a  finite  lower  semilattice  and  that  for  every  w{,w2e  W, 
W\  T  w2  —  (vV[  u  w2)+  is  the  lub  of  w{  and  w2  w.r.t.  c  whenever  this  element  belongs  to  W  (w!  and  w2 
may  indeed  contain  incompatible  pairs). 

Let  w  e  W,  any  w'  e  W  such  that  w  c  w'  is  called  an  extension  of  w.  We  denote  the  set  of  all 
extensions  of  w  as  Ext(w).  The  following  lemma  is  obvious  but  extremely  important. 

Lemma  1  (Monotonicity  of  extensions) 

If  (eu  e2 )  6  w,  then  for  every  w'  e  Ext{w),  (et,  e2)  e  w'. 

Proof 

By  the  definition  of  extension,  (e{,  e2)  e  w  c  w'.  El 

Let  us  now  define  a  translation  function  x(.)  from  an  EC  structure  to  its  logic  programming 
counterpart,  as  defined  in  Section  2.  t(.)  is  defined  by  cases: 

•  X(E)  =  { happens  ( e )  \  e  6  E } ; 

•  t([.))=  { initiates  (e ,  p)  \  e  e  E,  p  e  P  and  e  e  [p>); 

•  ^((-])  =  {terminates  (e ,  p)  :  e  €  E,  p  €  P  and  e  6  (p]}; 

•  T(].,.[)  =  {exclusive  (p,  q)  :  p,  q  e  P  and  ]p,  <?[} . 

We  define  %{H)  as  the  union  of  these  sets,  plus  the  axioms  of  EC,  SKEC  and  CREC  (except  the 
exclusivity  axiom)  reported  in  section  3.2.  It  can  be  easily  proven  that  x(.)  is  well-defined  and  is  indeed 
an  isomorphism  between  EC  theories  and  syntactically  correct  Prolog  programs  for  the  event  calculi. 
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Moreover,  we  extend  x(.)  to  provide  a  translation  of  states  of  knowledge: 

•  for  every  state  of  knowledge  o  e  Oe,  t(n)  =  {beforeFact  [e\ ,  e2)  :(e\,e2)e  «}. 

Notice  that  the  resulting  function  continues  to  be  an  isomorphism. 

4.2  A  uniform  modal  framework  for  EC,  SKEC  and  CREC 

We  investigate  now  the  properties  of  EC  structures  and  their  relationships  to  the  event  calculi 
introduced  in  Sections  2  and  3.  We  first  need  a  language  where  to  interpret  the  query  predicates  (holds, 
skeHolds  and  creHolds )  of  EC,  SKEC  and  CREC. 

Let  //=(£,  P,  [.),(.],  ].,.[)  be  an  EC  structure.  The  base  language  for  H  is  defined  as 
Ee  —  [p(e i,  e2)  :  e\ ,  e2  e  E,  p  e  P}.  The  modal  language  for  H  is  L#E=  {a.  Da,  Oa  :  a  e  LE).  The 
propositional  modal  language  for  H,  L@  E,  is  the  modal  language  obtained  by  drawing  the  propositional 
letters  from  the  base  language  of  H,  and  combining  them  by  means  of  the  usual  propositional 
connectives  and  the  modal  operators.  L@ E  is  defined  by  the  following  grammar,  where,  as  above,  a 
ranges  over  strings  in  the  base  language: 

cp  ::=  a  I  — icp  I  cp,  a  cp2 1  <Pi  v  92 1  dtp  I  Ocp 

We  call  EC  formulae  the  elements  of  L@E.  The  simplified  notations  L,  L#  and  L @  will  be  used  when  no 
ambiguities  arise.  In  this  section,  we  focus  on  L  and  L#.  In  particular,  we  show  that  EC  formulae  in  L# 
can  be  given  a  meaning  in  a  restriction  of  the  S4  modal  logic  and  that  this  meaning  is  the  formal 
counterpart  of  the  set  of  derivable  MVIs  in  EC,  SKEC  and  CREC.  The  full  language  L*2’  will  be  analysed 
in  the  next  section. 

We  now  introduce  a  modal  interpretation  for  EC  formulae.  Given  an  EC  structure 
H=  (E,  P,  [.},  (.],  ].,.[),  an  EC-frame  for  H  is  defined  as  the  structure  F=  ( W ,  c,  u)  where 

•  (W,  c)  is  the  ordered  set  of  all  strict  orderings  on  E  defined  above  (where  c  assumes  the  role  of 

accessibility  relation)-, 

•  x>  :  Lx  W  — »  [true, false}  is  called  the  evaluation  function  of  H  and  is  such  that 


x>(p(e  |,  e2),  w)  =  true  iff 

■  e\  e  [p)\  O') 

e2  e  </?];  («) 

■  0?i,  e2)  e  w;  (Hi) 

■  —3e  e  E.  ((et,  e)  e  w  a  (e,  e2)  e  w 

a  3q  €  P.  ((e  e  [q)vee  (q])  a  ]p,  <?[)).  (iv) 


The  last  condition  expresses  the  requirement  that  p  holds  uninterruptedly  between  et  and  e2.  As  a 
matter  of  convenience,  let  us  denote  it  as  nb(p,  et,  e2,  w).  Notice  also  that,  since  w  is  a  strict 
ordering,  (g|,  e)  e  w  and  (e,  e2)  e  vv  entail  that  e\  e  and  e  *  e2. 

Notice  that  EC-frames  structurally  constitute  a  subclass  of  the  usual  S4-frames.  Indeed,  the  latter 
are  characterized  by  enforcing  the  reflexivity  and  the  transitivity  of  their  accessibility  relation.  Here,  we 
add  a  request  for  antisymmetry.  Therefore,  every  S4-valid  formula  holds  in  an  EC-frame,  but  the 
converse  is  not  true  in  general. 

Finally,  we  define  the  notion  of  satisfiability  of  a  formula  in  a  knowledge  state  by  means  of  the 
relation  w  H<P: 

•  w  \=p(e{,e2)  iff  t) (p(eu  e2),  w)  =  true ; 

•  w  f=n<P  iff  for  every  w'  e  W  such  that  w  c  w’,  w'  cp; 
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w  0(p 

iff 

there  is  w'  e  W  such  that  vv  c:  w'  and  vv'  |=  cp; 

w  — icp 

iff 

w  cp  does  not  hold; 

W  [=  (pi  A  CP2 

iff 

xv  |=  <p  1  and  w  cp2; 

w  [=  tpi  v  (p2 

iff 

xv  cpi  or  w  |=  tp2. 

Lemma  2  (Pointwise  condition  for  necessity) 

Let  //=(£,  P,  [.),<.],  ].,.[)  be  an  EC  structure.  Then  for  any  eue2e  E,  p  e  P  and  w  e  W, 
xv  h=  °p(e  i>  e2 )  iff  the  following  conditions  are  satisfied: 

•  e{e[p) 

■  e2  e  (p] 

■  Oi,  e2)  e  w 

•  nsb(p,  eu  e2,  xv), 

where  nsb(p,  eu  e2,  w)  stands  for  the  expression 
Ve  €  E.Vq  e  P.  ( e  =  e\ 
v  e  =  e2 
v  ( e ,  e\)  e  w 
v  ( e2 ,  e)  e  xv 

v(ee  [?)vee  < q ]  =>  }p,q[)) 

Proof 

(<=)  Let  us  proceed  by  contradiction.  So,  assume  that  e{  e  [p),  e2e  {p\,  {e\,e2)e  w  and 
nsbip,  e{,  e2,  w),  but  there  exist  an  extension  w'  of  w  such  that  w'  (=  p(e |,  e2)  does  not  hold,  i.e.  such 
that  nb(p,  eu  e2,  w')  is  false.  After  some  logical  manipulations,  the  latter  statement  rewrites  to 

3e  e  E.3qe  P.  ((eu  e)  e  w'  a  (<?,  e2)  e  W  a  (e  e  [q)  v  e  e  (q])  a  ]p,  q[) 

Let  e  and  q'  witness  the  validity  of  this  formula.  By  instantiation,  we  obtain: 

Oi,  e)  e  w'  a  ( e ,  e2 )  e  w'  a  (e  e  [q')  vee  (q'])  a  ]p,  q'[  (A) 

We  can  instantiate  the  expression  for  nsb(p,  eh  e2,  w)  with  these  values  too.  The  resulting  formula  is: 

e  =  ei  v  e  =  e2  v  (e,  ei)  e  w  v  ( e2 ,  e)  e  wv  (e  e  [q')  vee  (q']  =>  -> ]p,q'[)  (B) 

We  must  show  that  none  of  the  alternatives  in  formula  (B)  applies.  Since  w  is  a  strict  order,  the  validity 
of  (A)  implies  that  e  can  be  neither  e{  nor  e2.  Analogously,  by  lemma  1,  either  (e,e{)e  w  or  ( e2 ,  e)  e  w 
would  violate  the  antisymmetry  of  w'.  Finally,  the  choice  of  q  contradicts  the  last  alternative,  i.e.  that 
( e  e  [q")  vee  {q']  =>  —>]p,q'[).  This  concludes  this  direction  of  the  proof. 

(=>)  We  will  again  proceed  by  contradiction.  Clearly,  if  e{  g  [p)  or  e2  £  (p],  then  we  cannot  obtain 
w'  \=p(e i,  e2)  in  any  state  of  knowledge  w'.  If  (e{,  e2)  w,  then  there  exist  extensions  of  w  containing 
(e2,  e{).  Because  of  antisymmetry,  these  extensions  cannot  contain  (<?i,  e2),  thus,  p{eu  e2)  cannot  be  valid 
in  them. 

Assume  now  that  nsb(p,  eue2,  w)  does  not  hold.  Therefore,  there  are  an  event  e  and  a  property  q 
such  that: 

e  *  e,  a  e  *  e2  a  (e,  e{)  £  w  a  (e2,  e)  £  wA(ee  [<7')  vee  (q'])  a  ]p,q'[ 

Since  the  pair  (elte2)e  w,  there  exists  at  least  one  extension  w'  of  w  such  that  (eu  e)  e  W  and 
(e,  e2 )  e  w'.  Therefore, 
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(e\,  e)  g  vv'  a  ( e ,  e2 )  g  w'  a  (c  G  [<7')  v  e  e  <r/])  a  ]/?,  <7'[ 
hence  nb(p,  eh  e2,  vv')  does  not  hold.  This  contradicts  the  hypothesis  that  vv  |=  Op(eh  e2).  0 

Notice  that,  differently  from  nb(p ,  et,  e2,  vv),  nsb(p,  et,  e2,  vv)  requires  that  for  all  e  e  E  satisfying 
certain  conditions,  (e,  e\)  g  vv  and  not  only  (elt  e)  G  vv;  similarly  for  ( e2 ,  e). 

Lemma  3  (Pointwise  condition  for  possibility) 

Let  H=(E,  P,  [.),(.],  ].,.[)  be  an  EC  structure.  Then  for  any  ehe2e  E,  p  e  P  and  vv  g  W, 
w  |=  ()p(e[,  e2)  iff  the  following  conditions  are  satisfied: 
et  e  [p) 

■  e2e  {p) 

■  ( e2 ,  <?,)  G  w 

■  nb(p,eue2,w). 

Proof 

(<=)  Let  us  construct  an  extension  w'  of  vv  such  that  w'  \=  p(e\,  e2).  The  state  of  knowledge  vv'  is 
defined  as  w'  =  (wu  {(e{,  «2)})+-  First  notice  that  W  is  consistent  (i.e.  it  does  not  violate  antisymmetry) 
since  w  is  consistent  and  ( e2 ,  e\)  G  w.  Then  observe  that  nb(p,  et,  e2,  w')  holds  by  the  definition  of  W  and 
the  monotonicity  of  extensions.  Otherwise,  we  should  be  able  to  conclude  that  there  is  an  event  e  G  E 
such  that  Oi,  e )  g  vv',  ( e ,  e2 )  e  w'  and  e  G  [q)  or  e  g  (<7]  for  some  property  q  e  P  with  ]p,  q[,  but  in  that 
case,  (eh  e)  e  w  and  ( e ,  e2)  e  w  contradicting  the  assumption  that  nb(p,  eh  e2,  w).  Therefore,  conditions 
(i-iv)  are  satisfied  w.r.t.  w',  hence  w'  \==  p(e{,  e2),  thus  w  Op(e\,  e2). 

(=»)  We  proceed  by  contradiction.  Clearly,  if  ^  1  G  [p)  or  e2  <£  (p],  then  we  cannot  obtain 
w'  [=  p(e\,  e2)  in  any  state  of  knowledge  vv'.  Analogously,  if  ( e2 ,  e\)  g  w,  then  ( e2 ,  e\ )  belongs  to  every 
extension  of  w,  forbidding  in  this  way  the  condition  (Hi)  of  the  definition  of  evaluation  to  be  satisfied. 
Finally,  if  nb(p,  et,  e2,  w)  does  not  hold  (i.e.  there  is  an  event  e  e  E  such  that  (eh  e )  g  vv,  (e,  e2)  g  vv  and 
e  g  [7)  or  e  e  (q\  for  some  property  q  g  P  with  ]p,  q[),  then  by  lemma  1,  the  same  condition  would 
apply  to  every  extension  w'  as  well,  thus  nb(p,  e\,  e2,  w')  would  not  hold  in  any  extension  w'  of  vv.  0 

Lemma  4  (Soundness  and  completeness  of  before  w.r.t.  transitive  closure) 

Let  H  =  ( E ,  P,  [.),  (.],  ].,.[)  be  an  EC  structure  and  o  a  state  of  knowledge,  then 
X(/f),  X(o)  | — sldnf  before  [6\ ,  e2)  iff  (e\,e2)&  0+ . 

Proof 

(=>)  We  will  prove  the  statement  by  induction  on  the  height  of  a  resolution  tree  for 
x (H),  x(o)  I — sldnf  before  (e\ ,  e2) .  If  the  height  is  1,  then  clause  (7)  in  section  2.3  must  have  been 
used.  Thus,  x(H),  x(o)  | — sldnf  beforeFact  [e{ ,  e2)  and  therefore,  (eu  e2)  g  o  e  o+.  Otherwise,  let  us 
assume  that  this  tree  has  height  h+ 1,  the  first  rule  applied  must  be  clause  (8).  By  unfolding,  we  obtain 
that  x(H),  x(o)  |— sldnf  beforeFact  (e,,  e)  and  x(H),  x(o)  [—sldnf  before  (e ,  e2) ,  for  some  event  e , 
where  the  latter  has  a  derivation  tree  of  height  h.  Thus,  (e\,  e )  G  o  and  by  the  induction  hypothesis, 
(e,  e2)  g  o+.  Now,  by  the  definition  of  transitive  closure,  (eu  e2)  g  o+. 

(«=)  Let  G  =  e  1, ...,  eh  with  e\  =  e\  and  et  =  e2  be  a  sequence  of  events  such  that  for  t'=l../-l 
(e„  e,+i)  G  o,  proving  in  this  way  that  (et,  e2)  e  o+.  We  conduce  the  proof  by  induction  on  the  length  /  of 
this  sequence.  If  /=  1,  then  ( eh  e2)  e  o,  thus  x(H),x(o)  | — sldnf  beforeFact  (et ,  e2)  and,  by  clause 
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(7),  x(H),x(o)  | — sldnf  before  {€\ ,  e2) .  Otherwise,  a  =  eh  e, e2,  with  (ehe)e  o  and  (e,  e2)  e  o+. 
By  induction  hypothesis,  we  have  that  x(H),x(o)  | — sldnf  beforeFact  (e\ ,  e)  and, 
x(H),x(o)  (—SLDNF  before  (e ,  e2) .  Finally,  by  applying  clause  (8),  we  obtain  that 
X(H),  X{o)  |— SLDNF  before  (Cl,  e2) .  ® 

We  can  now  state  the  major  result  of  this  paper: 

Theorem  5  (Soundness  and  completeness  of  EC,  SKEC  and  CREC  w.r.t.  the  EC-frame  semantics) 

Let  H  =  (E,  P,  [.),  <.],  ].,.[)  be  an  EC  structure  and  o  a  state  of  knowledge,  then 

a)  X(H),  x(o)  | — sldnf  holds  (period  (6\ ,  p,  e2) )  iff  o+  \=  p(e \,  e2)', 

b)  X(H),  X(o)  | — sldnf  skeHolds  (period  (e\ ,  p,  e2) )  iff  o+  [=□/?(£ i,  e2)', 

c)  x(H),X(o)  | — sldnf  ereHolds  (period (e\ ,  p,  e2) )  iff  o+  ^=()p(e \,e2). 

Proof 

a)  (=^)  Assume  first  that  x(H),  x(o )  | — sldnf  holds  (period  (e\ ,  p ,  e2) ) .  We  first  prove  that,  with  this 
hypothesis,  x>(p(eu  e2),  o+)  =  true-,  the  thesis  will  follow  by  the  definition  of  validity. 

By  unfolding  clause  (1)  we  obtain  the  following  relations,  where  the  right  column  shows  the 
translation  of  the  Prolog  code  on  the  left  column  into  the  EC  theory  H,  according  to  xA. 


•  X(H),  X (0)  [—SLDNF  happens  ( ex ) 

Cl.  1 

e,  e  E 

•  X(H),  X (0)  [—SLDNF  initiates  (e{,  p) 

a.  2 

£  ip) 

•  X(H),  X (0)  [—sldnf  happens  (e2) 

a.  3 

e2  e  E 

•  X(H),  X(o)  I — SLDNF  terminates  (e2,  p) 

a.  4 

e  {p ] 

•  X(H),  X(o)  | — sldnf  before  {e\ ,  e2) 

a.  5 

(e\,  e2 )  e  o+ 

•  X (H),X(o)  I — SLDNF  not  broken  (ei,  p,  e2) 

a.  6 

By  the  soundness  and  completeness  of  SLDNF  resolution  for  ground  negative  calls  and  non 
recursive  negative  clauses  [12],  a. 6  is  a  valid  relation  if  and  only  if  broken (e{,  p,  e2)  is  not 
derivable  from  X(H)  and  x(o)  through  SLDNF  resolution.  By  unfolding  clause  (2),  we  obtain  that 
x(H),  x(o)  [—sldnf  broken  (^i ,  p,  e2)  if  and  only  if: 

•  X(H),  X(o)  [—sldnf  happens  (e) 

a.l 

e  g  E 

•  X(H),  X(o)  [— sldnf  before  (e{,  e) 

a.  8 

(e\,  e)  €  o+ 

•  X (H),X(o)  [—SLDNF  before  (e,  e2) 

a.  9 

(e,  e2 )  g  o+ 

•  X(H),  x(o)  | — SLDNF  initiates  (e ,  q)  ;  terminates  (e ,  q) 

a. 10  e  e  \ 

q)vee  (q] 

•  X(H),  X(o)  [—sldnf  exclusive  [p ,  q) 

a.l  1 

)p ,  <A 

As  highlighted  in  the  right  column,  by  the  definition  of  x 

and  lemma  4,  x(H),  x(o)  [—sldnf 

broken (ei,  p,  e2)  will  succeed  if  and  only  if  there  is  an  event  e  e  E  such  that  {e\,  e)  e  o+, 
(e,  e2)  e  o+,  e  e  [q)  or  e  e  (q],  and  ]p,  q[  for  some  property  q  e  P.  Therefore,  the  previously  stated 
relation  a. 6  holds  if  and  only  if  — 3e  e  E.  ((e\,  e)  e  o+  a  ( e ,  e2)  e  o+  a  3q  e  P.  ((e  e  [<7)  v  e  e  (q])  a 
]p,  ^[)),  i.e.  iff  nb(p,  eu  e2,  o+ ),  but  this  is  precisely  the  condition  (iv)  of  the  definition  of  evaluation. 
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Now,  it  suffices  to  notice  that  the  relation  a. 2,  a. 4  and  a. 5  correspond  respectively  to  the 
conditions  (i),  (ii)  and  (Hi)  of  this  definition.  Therefore  v(p(e{,  e2),  o+)  =  true  and  thus 

o+  \=p(e  ue2). 

a)  (<j=)  It  suffices  to  notice  that  the  proof  just  given  is  indeed  bi-directional,  even  if  this  fact  has  not 
been  stressed  for  the  sake  of  readability. 

b)  (=>)  The  technique  used  for  proving  a)  will  be  applied  again.  Therefore,  assume  that 

X (H),X(o)  | — sldnf  skeHolds  (period  [ex ,  p,  e2) )  ■  Let  us  first  prove  that,  with  this  hypothesis, 
e\  g  [p ),  e2  g  (p],  (<?i,  e2)  g  o+  and  nsb(p,  eh  e2,  o+ );  the  thesis  will  follow  by  lemma  2. 

By  unfolding  clause  (3)  we  obtain  the  following  relations,  where  the  right  column  shows  the 
translation  of  the  Prolog  code  on  the  left  column  into  the  EC  theory  H,  according  to  xA. 


• 

X(H),  T(o)  | — SLDNF  happens  (e, ) 

b.  1 

e\  e  E 

• 

1(H),  X(o)  | — SLDNF  initiates  (e\ ,  p) 

b.  2 

ei  e  [p) 

• 

X(H),  X(o)  |  SLDNF  happens  ( e2 ) 

b.  3 

e2  g  E 

• 

X(H),X(o)  | — SLDNF  terminates  (e2,  p) 

b.  4 

e2  6  (P ] 

• 

X(H),X(o)  | — SLDNF  before  [6\ ,  e2) 

b.  5 

(eh  e2)  G  o+ 

• 

X(H),X(o)  | — sldnf  not  skeBroken  (£| ,  p,  e2) 

b.  6 

Again  by  [12],  b. 6  is  a  valid  relation  if  and  only  if  skeBroken  (e, 
x(H)  and  x(o)  through  SLDNF  resolution.  By  unfolding  clause  (4),  we 
skeBroken  (^i,  p,  e2)  if  and  only  if: 

,  p,  e2)  is  not  derivable  from 
obtain  that  x(H),  x(o)  \ — sldnf 

• 

X(H),  X(o)  [—sldnf  happens  ( e ) 

b.l 

e  G  E 

• 

'tCtf).  X(o)  | — SLDNF  e  \  =  =  e\ 

b.  8 

e  &  e\ 

• 

x(H),  x(o)  | — sldnf  e  \==  e2 

b.  9 

e  ^  e2 

• 

X(H),X(o)  | — sldnf  not  before  (e ,  ex ) 

b.  10 

(e,  e{)  <t  o+ 

• 

X(H),  X(o)  I — SLDNF  not  before  [e2,  e ) 

6.11 

(e2,  e )  €  o+ 

• 

X(H),X(o)  | — sldnf  initiates  (e,  q)  ;  terminates  [e ,  q) 

b.  12 

ee  [<7>  vcg  (q] 

• 

X(H),X(o)  | — SLDNF  exclusive  (p ,  q) 

6.13 

As  highlighted  in  the  right  column,  by  the  definition  of  x  and  by  lemma  4,  x(H),  x(o)  | — sldnf 
skeBroken  (ei ,  p,  e2)  succeeds  if  and  only  if  there  exists  an  event  e  e  E  distinct  from  et  and  e2  such 
that  (e,  et)  <£  o+,  ( e2 ,  e)  <£  o+,  either  e  e  [q)  or  e  g  (q],  and  ]p,  q[  for  some  property  q  e  P. 
Therefore,  the  relation  b, 6  above  holds  if  and  only  nsb(p,  e\,  e2,  o+)  holds. 

Now,  it  suffices  to  notice  that  the  relations  b. 2,  b. 4,  b. 5  and  b. 6  correspond  to  the  conditions  of 
lemma  2.  Therefore  o+  f=  Op(e{,  e2). 

b)  («=)  Again,  the  previous  proof  is  bi-directional. 
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c)  (=>)  Assume  that  x(H),x(o)  | — sldnf  creHoids  (period (e\ ,  p,  e2)  )■  Let  us  first  prove  that,  with 
this  hypothesis,  e:  e  [ p ),  e2  e  (p],  (e2,  e\)  <£  o+  and  nb{p,  e\,  e2,  o+);  the  thesis  will  follow  by  lemma 
3. 

By  unfolding  clause  (5)  we  obtain  the  following  relations,  where  the  right  column  shows  the 
translation  of  the  Prolog  code  on  the  left  column  into  the  EC  theory  H,  according  to  xA. 


X (H),  X(o)  |— SLDNF  happens  (e, ) 

C.  1 

e\  e  E 

X{H),  X(o)  |— SLDNF  initiates  ( e , ,  p) 

c.2 

e\  e  [p) 

X(H),  x(o)  |— SLDNF  happens  ( e2 ) 

c.3 

e2  e  E 

X(H),X(o)  | — sldnf  terminates  (e2,  p) 

c.4 

e2  e  {p] 

X(H),X(o)  |— sldnf  not  before  (e2,  e,) 

c.5 

(e2,  e\ )  g  o+ 

X(H),X(o)  | — sldnf  no t  broken  (g] ,  p,  e2) 

c.6 

nb(p,  eue2,  o+ ) 

where  the  last  line  derives  from  the  proof  of  a). 

The  relations  c. 2,  c. 4,  c. 5  and  c.6  correspond  to  the  conditions  of  lemma  3.  Therefore 
o+  |=0 p(ey,e2). 

c)  (<{=)  Once  more,  the  previous  proof  is  bi-directional.  0 

These  results  are  the  formal  counterpart  of  the  intuitive  description  of  the  behavior  of  holds, 
skeHolds  and  creHoids  presented  in  the  previous  sections.  The  relative  cardinalities  of  the  sets  of  values 
satisfying  these  predicates  are  related  in  the  following  corollary,  which,  again,  agrees  with  our  intuition. 

Corollary  6 

Let  F  and  0  be  the  factual  knowledge  and  the  ordering  information  of  a  specific  instance  of  the 
Event  Calculus,  then 

a)  if  EC+,  F,  O  | — sldnf  skeHolds  (period  (e\,  p,  e2) ) 
then  EC  +  ,  F,  0  I — SLDNF  holds  (period  (£[ ,  p,  e2)  ) 

b)  ifEC+,  F,  0  | — sldnf  holds  (period  [e\,  p,  e2)) 
thenEC+,F,0  | — sldnf  creHoids  (period  (et ,  p,  e2)  ) 

Proof 

These  relations  can  be  rewritten  in  the  following  way: 

Let  H  -  t‘(EC+  u  F)  and  o  =  x"'(0),  then 

a)  if  H,  o+  |=  Up{e ,,  e2),  then  H,  o+  \=p(eu  e2 ); 

b)  if  H,  o+  \=p(e  b  e2),  then  H,  o+  \=  0p(e{,  e2). 

The  validity  of  these  expressions  is  a  direct  consequence  of  the  reflexivity  of  the  accessibility 
relation  of  EC-frames.  Indeed,  H,  o+  f=  IHpOi,  e2)  iff  p(e ,,  e2)  is  valid  in  every  extension  of  o+,  in 
particular  in  o+  itself.  Analogously,  if  H,  o+  [=  p(eu  e2),  then  H,  o+  f=  Op(eu  e2)  by  reflexivity.  0 

We  can  restate  this  corollary  in  a  form  closer  to  the  Event  Calculus  terminology.  Let  MVIEo 
MVIskec  and  MVICrec  denote  the  set  of  MYIs  derivable  from  EC,  SKEC  and  CREC  respectively  in  a 
given  state  of  knowledge  o,  then  MVISKEC(o)  c  MVIEC(o)  c  MVICrEc(o). 
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5  Handling  propositional  connectives  in  EC,  SKEC  and  CREC 

In  the  previous  chapter,  we  proved  that  EC,  SKEC  and  CREC  can  be  given  a  uniform  modal 
semantics  by  interpreting  these  calculi  into  EC-frames.  These  are  indeed  specific  forms  of  S4-frames. 
Therefore,  the  theoretical  results  obtained  in  the  latter  setting  apply  to  the  former.  In  particular,  S4- 
frames  provide  a  model  for  the  usual  boolean  connectives.  We  could  take  advantage  of  this  fact, 
obtaining  in  this  way  a  more  powerful  unified  calculus,  if  we  only  were  able  to  implement  the 
connectives  in  such  a  way  to  take  into  account  their  interaction  with  the  modalities.  This  is  problematic 
in  Prolog.  In  fact,  when  dealing  with  the  modalities,  we  often  need  to  explore  some  or  even  all  of  the 
possible  future  states  of  knowledge.  Using  assert  and  retract  statements  for  this  purpose  is  awkward 
and  lacks  flexibility.  Another  solution,  experimented  to  a  limited  extent  in  [4],  consists  in  maintaining  the 
extensions  to  the  current  knowledge  state  into  a  hypotheses  list;  this  is  bulky  and  solves  the  problem 
only  partially. 

With  these  considerations  in  mind,  we  decided  to  adopt  a  different  implementation  language. 
Specifically,  we  turned  our  attention  to  the  linear  logic  programming  language  Lolli,  that  is  indeed  an 
extension  of  Prolog.  Lolli  is  based  on  linear  logic  and  therefore  allows  to  model  the  retraction  of  a  fact 
from  the  current  knowledge  state  as  a  resource  consumption.  Moreover,  by  allowing  implications  in 
goal,  this  language,  as  well  as  its  precursor  ^Prolog,  provide  an  effective  and  logical  means  of 
temporarily  asserting  new  facts  into  the  database. 

5.1  The  linear  logic  programming  language  Lolli 

Miller  et  al.  [15]  have  defined  a  general  criterion  (existence  of  uniform  proofs)  for  extracting 
fragments  of  logical  systems  suited  to  be  implemented  as  logic  programming  languages.  The  language  of 
Horn-clauses,  on  which  Prolog  is  based,  has  been  proven  to  have  the  required  properties,  and  has  indeed 
been  shown  to  exploit  only  to  a  minimal  extent  the  connective  patterns  of  predicate  logic  that  ensure  the 
existence  of  such  proofs.  In  particular,  they  show  that  it  is  possible  to  go  beyond  Horn-clauses  by 
allowing  implication  and  universal  quantification  in  goals.  While  not  prejudicing  the  possibility  of  an 
efficient  implementation,  this  enhancement  increases  enormously  the  expressiveness  of  the  language 
[14],  The  language  ^Prolog  is  a  realization  of  this  idea  in  a  simply-typed  higher-order  setting  [13,  15]. 

^Prolog  stems  from  intuitionistic  predicate  logic.  However,  uniform  proofs  are  a  general  concept  in 
proof  theory.  The  logic  programming  language  Lolli  [6,  7]  is  the  result  of  applying  this  criterion  to  linear 
logic  [5].  The  short  space  available  forbids  us  to  give  a  detailed  account  of  linear  logic  and  to  present  a 
complete  description  of  Lolli.  The  interested  reader  is  invited  to  read  the  above  mentioned  references. 
We  intend  instead  to  illustrate  only  those  aspects  that  are  needed  in  the  subsequent. 

Linear  logic  is  a  refinement  of  traditional  logic  that  constrains  the  number  of  times  an  assumption  is 
used  in  a  proof.  A  formula  G  is  derivable  from  a  set  of  formulae  D  if  and  only  if  there  is  a  proof  of  G 
that  uses  exactly  once  every  formula  in  D,  with  the  exception  of  formulae  that  are  preceded  by  the 
modal  operator  !  (read  of-course  or  bang),  which  indicates  that  this  formula  can  be  used  as  many  times 
as  needed  in  the  derivation,  eventually  zero.  It  is  convenient  to  write  linear  sequents  as  D\  R  | —  G, 
where  G,  D  and  R  are  respectively  the  formula  to  prove,  the  set  of  banged  assumptions  and  the  set  of 
non-banged  premises.  R  can  be  seen  as  the  resources  available  for  the  proof  of  G,  while  the  elements  of 
D  are  costless  items.  R  and  D  are  called  the  bound  and  unbound  context  respectively. 

The  duplication  of  the  left-hand  side  of  linear  sequents,  a  direct  consequence  of  the  constraints  on 
the  use  of  formulae  in  proofs,  entails  the  definition  of  a  new  set  of  connectives  for  the  resulting  logic. 
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With  a  drastic  simplification,  we  can  say  that  every  binary  connective  in  traditional  logic  is  transformed 
in  a  pair  of  linear  connectives,  one  requiring  the  bound  context  to  be  duplicated  when  proving  its 
subformulae,  and  the  other  having  it  split  among  them.  The  linear  connectives  on  which  Lolli  is  based 
are  0  (multiplicative  conjunction,  or  times),  &  (additive  conjunction,  or  with),  ©  (multiplicative 
disjunction,  or  oplus),  -o  (linear  implication,  or  lollipop),  =>  (traditional  implication),  plus  !  (bang)  and 
the  two  constants  true  and  erase. 

The  syntax  of  Lolli  is  reminiscent  of  that  of  Prolog,  with  some  notational  differences.  Variables 
begin  with  an  uppercase  letter,  unless  explicitly  quantified,  while  constants  begin  always  with  a 
lowercase  letter.  Terms  and  atoms  are  written  in  curried  form.  For  instance,  the  Prolog  term 
f  (a,  g(b,  c),  d)  is  written  in  Lolli  as  (fa  (gbc)  d)  (the  outermost  parentheses  are  not  needed). 

Lolli  program  and  goals  are  constructed  according  to  the  grammar  show  below,  where  A,  G,  R  and 
D  are  syntactic  variables  for  atoms,  goal  formulae,  linear  clauses  and  banged  clauses;  the  use  of  the  G,  R 
and  D  is  coherent  with  their  use  in  linear  sequents  above.  In  the  following,  we  will  use  expressions  built 
out  of  the  productions  in  bold  face  only. 

R  ;:=  true  I A  I  R\  &  R2  I  R  G  I  R  <=  G\  forall  x  \  R 

D  ::=R\  {R}  I  DX  ,  D2 

G  "=  true  I  erase  I  A  I  (G}  I  Gi  &  G2  I  Gj  ,  G2  I  D  -o  G  I  R  =>  G  I  forall  X  \  G 
I  exists  X \  G  I  Gi  ;  G2  I  Gi  ->  G2  |  G3 

We  give  a  connective-directed  operational  semantics  for  goals,  limiting  ourselves  to  the  patterns 
that  will  be  used  in  the  following.  We  write  S  =  S|  +  S2  to  indicate  that  S)  and  S2  form  a  partition  of  the 
set  S.  In  order  to  keep  the  notation  simple,  we  write  S+s  and  Sus  instead  of  S+{.v}  and  Su{.v}  when  no 
ambiguity  arises. 

true  always  succeeds  without  consuming  any  resource.  Therefore,  any  formula  in  the  bound 
context  must  be  used  in  other  parts  of  the  proof  of  the  current  goal. 

D',  0  | — LOLLI  true 

erase  always  succeeds  too,  but  consumes  every  resource  in  the  bound  context.  It  is  usually 
exploited  to  ignore  information  eventually  present  into  the  bound  context  and  not  needed  in 
the  proof  of  the  current  goal. 

D;  R  | — lolli  erase 

A  looks  for  a  linear  or  banged  clause  h :  -b  (eventually  a  fact  h)  which  head  unifies  with  the 

atomic  goal  A  and  tries  to  solve  its  body  in  the  current  context.  If  the  selected  clause  is 
linear,  it  is  removed  from  the  bound  context. 

D  u  h-.-b;  R  1 — lolli  A  if  Aa  =  ha  and  D\  R  | — lolli  b° 

D  ;  R  +  h-.-b  \ — lolli  A  if  Aa  =  ha  and  D;  R  | — lolli  bG 

{G}  ( bang  G)  attempts  to  solve  the  goal  G  without  using  any  formula  in  the  bound  context. 

D',  R  |— 1 lolli  1 G }  iff  D\  0  [—lolli  G 

G\  ,  G2  (Gi  times  G2)  first  attempts  to  find  a  proof  for  Gx  and,  in  case  of  success,  attempts  a  proof 
for  G2  that  uses  whatever  element  of  the  bound  context  were  not  used  in  the  proof  of  G,  . 
Therefore,  it  divides  the  resources  in  the  bound  context  between  G\  and  G2. 

D;  R\  +R2  (— lolli  G(  ,G2  iff  D,RX  (— lolli  G\  and  D;  R2  [—lolli  Gi 
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G\  Sc  G2  (G i  with  G2)  operates  as  in  the  previous  case  with  the  difference  that  it  tries  to  prove  both 
G i  and  G2  using  the  same  resources.  Therefore,  it  duplicates  the  resources  in  the  bound 
context  for  each  conjunct. 

D;  R  | — lolli  G|  &  G2  iff  D\R  | — l  olli  G|  and  D\  R  | — lolli  G2 

G i  ;  G2  (G,  oplus  G2)  first  attempts  to  find  a  proof  for  G|  and,  in  case  of  success,  have  the  overall 
goal  succeed.  In  case  of  failure,  a  proof  for  G2  is  attempted  using  the  same  set  of  resources 
as  for  G\. 

D ;  R  | — lolli  G|  ;  G2  iff  D,  R  | — lolli  G|  or  D;  R  | — lolli  G2 

r  -o  G  ( r  lollipop  G)  causes  the  clause  r  to  be  added  to  the  bound  context  and  a  proof  for  G  to  be 

attempted  from  this  augmented  program. 

D\  R  | — lolli  r  ~°  G  iff  D,  R  +  r  | — lolli  G 

d  =>  G  ( d  implies  G)  causes  the  clause  d  to  be  added  to  the  unbound  context  and  to  attempt  a  proof 

for  the  goal  G  from  this  augmented  context.  It  is  logically  equivalent  to  { d)  -o  G. 

D;  R  | — lolli  d  =>  G  iff  D  u  d\  R  | — lolli  G 

G->Gs|Gf  (guarded  expression)  is  the  one  extra-logical  operator  included  into  the  current 
implementation  of  Lolli.  Such  a  goal  attempts  a  proof  of  G.  In  case  of  success,  the  overall 
goal  succeeds  if  Gs  succeeds.  If  instead  the  interpreter  fails  to  find  a  proof  for  G,  it  tries  to 
find  a  proof  for  Gf  and  its  success  determines  the  success  of  the  overall  goal. 

D\  R  1 — lolli  G  ->  Gs  |  Gf  iff  if  D\  R  | — lolli  G  then  D;  R  \ — lolli  Gs 

else  D;  R  \ — lolli  Gf 

Such  guarded  expressions  have  been  used  in  our  implementation  to  model  negation  as 
failure.  In  fact, 

not  G  G  ->  fail  |  true. 

Linear  and  banged  clauses  are  entered  into  the  appropriate  context  either  as  the  effect  of  solving  an 
implication  goal,  or  by  reading  them  from  a  file.  In  the  latter  case,  clauses  are  implicitly  banged;  linear 
clauses  are  preceded  by  the  keyword  linear. 

Implication  in  goals  combined  with  universal  quantification  yields  a  powerful  scoping  mechanism 
[14].  Lolli  provides  a  module  system  realized  through  the  combination  of  the  two.  Modules  are 
parametric  and  permit  abstraction  and  information  hiding  by  means  of  the  local  declaration. 

5.2  Lolli  coding  of  EC,  SKEC  and  CREC  with  connectives 

Let  us  now  define  a  coding  function  g(.)  from  EC  formulas  of  the  complete  language  L(n'  to  well- 
formed  Lolli  expression.  g(.)  is  defined  recursively  as  follows. 

<5{p{e\,  e2 ))  =  (period  e\  p  e2) 
o(D<P)  =  (must  a(9)> 
a(Otp)  =  (may  CT(cp)) 

a(-.<p)  =  (not  c(cp)) 

a(9|ACp2)  =  (and  a(cpi)  C7(cp2) ) 

G((pi  V  cp2)  =  (  or  G((p,)  0(<p2)) 

Notice  that  g(.)  is  indeed  an  isomorphism  between  L@  and  Lolli  expressions  built  out  of  the  functors 
must,  may,  not,  and  and  or  (where  the  first  three  are  unary  and  the  last  two  are  binary),  and  expressions 
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of  the  form  (period  e\  p  e2)  where  e,  and  e2  are  the  representation  of  events  and  p  is  the 
representations  of  a  property. 

We  now  turn  to  the  theoretical  results  that  will  lead  to  the  implementation  of  L@.  The  following 
lemma  provides  us  with  the  means  for  handling  generic  formulae  having  a  modal  quantification  as  their 
outermost  connective. 

Lemma  7 

Let  L@  be  the  modal  propositional  language  of  an  EC  structure  H  =  ( E ,  P,  [.),  (.],  ].,.[),  (p  a  formula 
in  L@  and  w  e  W,  then 

a)  w  (=□9  iff  w  f=  cp 

and  w  t  {(ex,  e2 )}  |=  Dtp  for  every  (ex,  e2 )  such  that  (eh  e2)  g  w  and 

O2,  ex)  <Z  w; 

b)  w  |=  Ocp  iff  w  f=cp 

or  w  T  {(ex,  e2)}  |=  Ocp  where  (ex,  e2)  <£.  w  and  ( e2 ,  ex)  £  w. 

Proof 

First  notice  that  if  (ex,  e2)  <£  w  and  (e2,ex)i  w,  then  w  T  [(e\,e2)}&  W  since,  in  this  case, 
upgrading  with  (ex,  e2)  cannot  violate  antisymmetry  in  any  way. 

Moreover,  for  every  we  W, 

Ext(w)  =  {w}u  U  Ex/(wT  {(<?,, e2)}). 

(c2.«i  lew 

In  fact,  let  w  e  Ext(w),  then,  by  definition,  w  c  w'.  Therefore,  either  w'  =  w  or  there  exist  a  pair 
(ex,  e2)  e  w'  \  w.  In  the  latter  case,  w'  e  Ext(w  T  {(e{,  e2)}).  The  opposite  inclusion  is  straightforward. 

We  have  now  all  the  tools  needed  to  prove  the  statement  of  the  lemma. 

a)  w  h°<p  iff  for  each  w  e  Extiw),  w'  1=9 

iff  for  each  w'  e  { w}  u  U  £xt(wT{(e1,e2)}),  w'  |=  cp 

(«,  ,e2)tw 
(e2,f|)«  w 

iff  vv  |==  cp  and  for  every  (ex,  e2 )  such  that  (eh  e2)  £  w  and  (ex,  e2 )  ^  w,  then  for  each 
w'  e  Ext(w  T  {(ex,  e2)}),  w'  (=  cp 

iffw  [=  cp  and  for  every  (ex,  e2)  such  that  (ex,  e2),  (ex,  e2)  &  w,  w  T  {(e\,e2)}  1=09- 

b)  The  proof  is  completely  analogous  to  that  for  a).  0 

In  the  subsequent,  we  will  write  a)  into  a  different  but  clearly  equivalent  form: 

w  h°9  iff  it  is  not  the  case  that 

w  cp  does  not  hold  or 

w  t  {(ex,  e2 )}  \=  0 — icp  for  some  (ex,  e2 )  such  that  (ex,  e2)  £  w  and  (e2,  ex)  £  w. 

In  S4,  many  connective  have  a  simple  interaction  with  the  modal  operators  and  can  be  coded  by 
means  of  elementary  rewriting  rules.  When  implementing  the  unified  theory,  we  can  avoid  or  at  least 
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delay  visiting  the  extensions  of  the  current  state  of  knowledge  by  applying  these  rules.  The  following 
properties  are  valid  in  S4,  and  therefore  in  EC-frames.  A  proof  can  be  found  in  [8]. 

Property  8 

Let  L  be  any  propositional  modal  language,  ^=S4  the  validity  relation  in  S4-frames  [8]  and  (p  a 
formula  in  L,  then 


h=S4  E— itp 

iff 

^=S4  — 'Otp 

t=S4  0-i<p 

iff 

(=S4  -'□9 

b=s4 

iff 

(=S4  09 

Hu  ^9 

iff 

h=S4  O9 

(=S4  n(<Pl  A  cp2) 

iff 

\=S4  D9l  a  q92 

h=s4  0(9 1  v  92) 

iff 

h=s4  0(p,  V  0cp2 

We  can  now  give  the  implementation  of  our  extension  of  EC,  SKEC  and  CREC  with  the 
connectives. 


MODULE  ec. 

LOCAL  broken  skeBroken  skeHolds_or  skeHolds_may . 


% -  Propositional 

formulae 

holds  (period  Ei  P  Et)  : 

- 

(i) 

;  (initiates  E  Q  ;  terminates  E  Q) , 

happens  Ei ( 

exclusive  P  Q, 

erase . 

initiates  Ei  P, 
happens  Et, 

exclusive  P  P. 

(3) 

terminates  Et  P, 

before  Ei  Et, 

not  (broken  Ei  P  Et) , 

erase  & 

erase  & 

erase . 

holds  (not  X) 
not  (holds  X) , 

erase . 

(4) 

broken  Ei  P  Et  : - 
happens  E , 

(2) 

holds  (and  X  Y) 

holds  X  &  holds  Y. 

(5) 

before  Ei  E, 

erase  & 

holds  (or  X  Y)  : - 

(6) 

before  E  Et, 

erase  & 

holds  X;  holds  Y. 

% -  Must-formulae 

holds  (must  (period  Ei  P 

Et)) 

(7) 

holds  (must  (and  X  Y) ) 

(10) 

happens  Ei , 

holds  (must  X)  &  holds 

(must  Y) . 

initiates  Ei  P, 
happens  Et, 
terminates  Et  P, 

erase  & 

holds  (must  (or  X  Y) ) 
not  (skeHolds_or  X  Y) , 

erase . 

(ID 

before  Ei  Et,  erase  & 

not  (skeBroken  Ei  P  Et), erase. 

skeHolds_or  X  Y  : - 

not  (holds  X) ,  not  (holds  Y) . 

(12) 

skeBroken  Ei  P  Et  : - 

(8) 

skeHolds_or  X  Y  : - 

(13) 

happens  E , 

happens  El ,  happens  E2 , 

erase  & 

not  (E  =  Ei ) , 

not  (before  El  E2 ) , 

erase  & 

not  (E  =  Et) , 

erase  & 

not  (before  E2  El), 

erase  & 

not  (before  E  Ei) , 

erase  & 

beforeFact  El  E2  => 

not  (before  Et  E) , 

erase  & 

may  (not  (hold  (or  X  Y) ) ) . 

(initiates  E  Q  ;  terminates  E  Q) , 
exclusive  P  Q,  erase. 

holds  (must  (must  X)) 
holds  (must  X) . 

(14) 

holds  (must  (not  X)) 
not  (holds  (may  X) ) , 

erase . 

(9) 

holds  (must  (may  X)) 
not  ( skeHolds_may  X) , 

erase . 

(15) 
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erase  & 


skeHolds_may  X  *  (16) 

not  (holds  X) . 

skeHolds_may  X  (17) 

happens  El ,  happens  E2 ,  erase  & 
not  (before  El  E2 ) ,  erase  & 


not  (before  E2  El), 
beforeFact  El  E2  => 

may  (not  (hold  (may  X) ) ) . 


% -  May- formulae 

holds  (may  (period  Ei  P  Et)  )  (18) 

happens  Ei , 
initiates  Ei  P, 
happens  Et , 

terminates  Et  P,  erase  & 

not  (before  -Et  Ei)  ,  erase  & 

not  (broken  Ei  P  Et) ,  erase. 


beforeFact  El  E2  => 

holds  (may  (and  X  Y) ) . 
holds  (may  (or  X  Y)  )  (22) 

holds  (may  X) ;  holds  (may  Y) . 

holds  (may  (may  X))  (23) 

holds  (may  X) . 


holds  (may  (not  X)) 

not  (holds  (must  X)),  erase. 


(19) 


holds  (may  (and  X  Y) ) 
holds  (and  X  Y) . 
holds  (may  (and  X  Y) ) 

happens  El ,  happens  E2 , 
not  (before  El  E2), 
not  (before  E2  El) , 


(20) 

(21) 

erase  & 
erase  & 
erase  & 


holds  (may  (must  X) ) 
holds  (must  X) . 


(24) 


holds  (may  (must  X)) 

happens  El ,  happens  E2 ,  erase  & 

not  (before  El  E2 ) ,  erase  & 

not  (before  E2  El),  erase  & 

beforeFact  El  E2  => 

holds  (may  (must  X) ) . 


(25) 


Clauses  13,  17,  21  and  25  are  particularly  interesting  since  they  make  use  of  the  implication  in  the 
body  of  clauses.  Notice  in  particular  how  clauses  11  and  15  implement  the  alternative  formulation  of 
case  a)  of  lemma  7. 

The  following  theorem  guarantees  that  the  previous  Lolli  program  is  a  sound  and  complete 
implementation  of  EC,  SKEC  and  CREC  with  connectives. 

Theorem  9  (Soundness  and  completeness  of  EC,  SKEC  and  CREC  with  connectives  w.r.t.  the  EC- 
frame  semantics) 

Let  H  =  ( E ,  P,  [.),  (.],  ].,.[)  be  an  EC  structure  and  o  a  state  of  knowledge,  then 
X(H),X(o);0  [—LOLLI  holds  ( cr(<p) )  iff  o+  [=  cp 

Proof 

Apply  the  technique  used  in  the  proof  of  theorem  5  together  with  lemma  7,  property  8  and  the 
statement  of  theorem  5  itself.  0 
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